AVP, Business Information Security Officer (US)

Work Location:

Mount Laurel, New Jersey, United States of America

Hours:

40

Pay Details:

$200,000 - $280,000 USD

TD is committed to providing fair and equitable compensation opportunities to all colleagues. Growth opportunities and skill development are defining features of the colleague experience at TD. Our compensation policies and practices have been designed to allow colleagues to progress through the salary range over time as they progress in their role. The base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, geographic location, and other specific business and organizational needs. 

As a candidate, you are encouraged to ask compensation related questions and have an open dialogue with your recruiter who can provide you more specific details for this role.

Line of Business:

Technology Solutions

Job Description:

The AVP, Business Information Security Officer is a strategic governance, risk, and control leader of a group of technology security and risk professionals in Canada and the U.S. focused on managing a comprehensive program to assess, prioritize, and mitigate business risk.  This role is a strategic risk partner with high technical knowledge of cyber risk.  The individual will interact with key Protect Platform businesses (supporting controls across all business groups) including AML Technology, Physical Security, Customer Identity & Access Management, Protect Operations (Threat Intel, Cyber Threat Management, Fusion Incident), Cloud Infrastructure, Crypto Security, Cloud Security, Cyber Engineering, and Data Protection.

Depth & Scope:

• Builds, develops and sustains a team of professionals responsible for interacting with and supporting each of the major TDBFG business segments; This team will develop and maintain relationships with key business leaders and other stakeholders internal and external to the organization to ensure a high positive public profile for TDBFG.

• Responsible for the team of business segment support resources; Works with peers within TRMIS who are responsible for Governance, Regulatory Reporting, Threat/Vulnerability/Incidents, Project Management, and Access Management

• Develops a Center of Excellence orientation/approach that allows Technology Risk Management best practices to be shared across the enterprise; Provides strategic insight, advice and counsel on security-based strategy work across the business lines, ensuring appropriate risk/control frameworks and technology governance methodologies are in place, and that TDBFG policies are being adhered to

• Provides guidance and/or consulting service to technology/business partners on key technology initiatives and provides expertise in the areas of Computer Forensic Services, Incident Response Management, Vulnerability Management & Reporting and Managed Security Services

• Develops on-going Technology Risk reporting, monitors key trends and/or breaches and works with executive management to help assess/identify and address key issues and escalate to appropriate levels and relevant stakeholders where required

• Keeps abreast of emerging issues, trends, and evolving technology regulatory requirements and assesses potential impacts to the Bank and ensures business risks for applications are defined across each line of business, and the technology risk/control framework is in place, monitored, tested and reported on regularly

• Works in partnership with the business lines to address technology based audit findings and issues and ensure programs are in place to comply with federal and industry based regulations as they apply to technology controls across TDBFG

• Ensures outsourcing partners adhere to TDBFG security policies and standards, by establishing oversight controls, and by ensuring risk has been mitigated to protect the Bank

• Oversees the development of system security awareness and communication training programs across the enterprise to ensure alignment with the overall Technology strategy and compliance to regulatory and/or established Bank system security standards

• Ensures effective development practices are in place to keep team current with emerging technology advancements/trends, and regulations to support business needs and leverage a highly capable management team, actively developing and deploying talent across the business

• Builds for the future and provides people leadership; oversees people plans and strategies to attract, motivate and retain a highly diverse, qualified and engaged human resource base to fulfill current and future business needs

• Ensures that business operations are in compliance with applicable